Warning: Permanently added '[localhost]:34482' (ECDSA) to the list of known hosts.
2025/08/29 10:30:05 fuzzer started
2025/08/29 10:30:06 dialing manager at localhost:43077
syzkaller login: [   50.364473] cgroup: Unknown subsys name 'net'
[   50.509042] cgroup: Unknown subsys name 'cpuset'
[   50.532066] cgroup: Unknown subsys name 'rlimit'
2025/08/29 10:30:17 syscalls: 2214
2025/08/29 10:30:17 code coverage: enabled
2025/08/29 10:30:17 comparison tracing: enabled
2025/08/29 10:30:17 extra coverage: enabled
2025/08/29 10:30:17 setuid sandbox: enabled
2025/08/29 10:30:17 namespace sandbox: enabled
2025/08/29 10:30:17 Android sandbox: enabled
2025/08/29 10:30:17 fault injection: enabled
2025/08/29 10:30:17 leak checking: enabled
2025/08/29 10:30:17 net packet injection: enabled
2025/08/29 10:30:17 net device setup: enabled
2025/08/29 10:30:17 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/08/29 10:30:17 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/08/29 10:30:17 USB emulation: enabled
2025/08/29 10:30:17 hci packet injection: enabled
2025/08/29 10:30:17 wifi device emulation: enabled
2025/08/29 10:30:17 802.15.4 emulation: enabled
2025/08/29 10:30:17 fetching corpus: 0, signal 0/2000 (executing program)
2025/08/29 10:30:17 fetching corpus: 50, signal 21880/25347 (executing program)
2025/08/29 10:30:17 fetching corpus: 100, signal 36905/41621 (executing program)
2025/08/29 10:30:17 fetching corpus: 150, signal 42675/48700 (executing program)
2025/08/29 10:30:17 fetching corpus: 200, signal 49848/56942 (executing program)
2025/08/29 10:30:17 fetching corpus: 250, signal 54974/63180 (executing program)
2025/08/29 10:30:18 fetching corpus: 300, signal 60665/69802 (executing program)
2025/08/29 10:30:18 fetching corpus: 350, signal 65045/75116 (executing program)
2025/08/29 10:30:18 fetching corpus: 400, signal 69985/80766 (executing program)
2025/08/29 10:30:18 fetching corpus: 450, signal 73147/84834 (executing program)
2025/08/29 10:30:18 fetching corpus: 500, signal 75302/87909 (executing program)
2025/08/29 10:30:18 fetching corpus: 550, signal 77850/91270 (executing program)
2025/08/29 10:30:18 fetching corpus: 600, signal 79433/93711 (executing program)
2025/08/29 10:30:18 fetching corpus: 650, signal 81869/96852 (executing program)
2025/08/29 10:30:18 fetching corpus: 700, signal 84323/99975 (executing program)
2025/08/29 10:30:18 fetching corpus: 750, signal 87567/103714 (executing program)
2025/08/29 10:30:18 fetching corpus: 800, signal 90114/106821 (executing program)
2025/08/29 10:30:19 fetching corpus: 850, signal 91650/108992 (executing program)
2025/08/29 10:30:19 fetching corpus: 900, signal 93467/111387 (executing program)
2025/08/29 10:30:19 fetching corpus: 950, signal 95086/113596 (executing program)
2025/08/29 10:30:19 fetching corpus: 1000, signal 97436/116326 (executing program)
2025/08/29 10:30:19 fetching corpus: 1050, signal 99440/118736 (executing program)
2025/08/29 10:30:19 fetching corpus: 1100, signal 101077/120769 (executing program)
2025/08/29 10:30:19 fetching corpus: 1150, signal 101996/122293 (executing program)
2025/08/29 10:30:19 fetching corpus: 1200, signal 102923/123838 (executing program)
2025/08/29 10:30:19 fetching corpus: 1250, signal 104779/126043 (executing program)
2025/08/29 10:30:19 fetching corpus: 1300, signal 106084/127735 (executing program)
2025/08/29 10:30:19 fetching corpus: 1350, signal 108117/129906 (executing program)
2025/08/29 10:30:20 fetching corpus: 1400, signal 109922/132028 (executing program)
2025/08/29 10:30:20 fetching corpus: 1450, signal 110659/133302 (executing program)
2025/08/29 10:30:20 fetching corpus: 1500, signal 112240/135178 (executing program)
2025/08/29 10:30:20 fetching corpus: 1550, signal 113184/136468 (executing program)
2025/08/29 10:30:20 fetching corpus: 1600, signal 114220/137867 (executing program)
2025/08/29 10:30:20 fetching corpus: 1650, signal 115377/139288 (executing program)
2025/08/29 10:30:20 fetching corpus: 1700, signal 116476/140597 (executing program)
2025/08/29 10:30:20 fetching corpus: 1750, signal 117789/142050 (executing program)
2025/08/29 10:30:20 fetching corpus: 1800, signal 118850/143288 (executing program)
2025/08/29 10:30:20 fetching corpus: 1850, signal 120000/144581 (executing program)
2025/08/29 10:30:20 fetching corpus: 1900, signal 121202/145869 (executing program)
2025/08/29 10:30:20 fetching corpus: 1950, signal 121905/146873 (executing program)
2025/08/29 10:30:21 fetching corpus: 2000, signal 123330/148264 (executing program)
2025/08/29 10:30:21 fetching corpus: 2050, signal 124020/149249 (executing program)
2025/08/29 10:30:21 fetching corpus: 2100, signal 124764/150293 (executing program)
2025/08/29 10:30:21 fetching corpus: 2150, signal 125689/151348 (executing program)
2025/08/29 10:30:21 fetching corpus: 2200, signal 127486/152862 (executing program)
2025/08/29 10:30:21 fetching corpus: 2250, signal 128630/154032 (executing program)
2025/08/29 10:30:21 fetching corpus: 2300, signal 129394/154940 (executing program)
2025/08/29 10:30:21 fetching corpus: 2350, signal 130158/155859 (executing program)
2025/08/29 10:30:21 fetching corpus: 2400, signal 130935/156758 (executing program)
2025/08/29 10:30:21 fetching corpus: 2450, signal 131693/157635 (executing program)
2025/08/29 10:30:21 fetching corpus: 2500, signal 132502/158516 (executing program)
2025/08/29 10:30:22 fetching corpus: 2550, signal 133482/159439 (executing program)
2025/08/29 10:30:22 fetching corpus: 2600, signal 134229/160254 (executing program)
2025/08/29 10:30:22 fetching corpus: 2650, signal 134994/161044 (executing program)
2025/08/29 10:30:22 fetching corpus: 2700, signal 135745/161781 (executing program)
2025/08/29 10:30:22 fetching corpus: 2750, signal 136533/162573 (executing program)
2025/08/29 10:30:22 fetching corpus: 2800, signal 137094/163210 (executing program)
2025/08/29 10:30:22 fetching corpus: 2850, signal 137561/163831 (executing program)
2025/08/29 10:30:22 fetching corpus: 2900, signal 138294/164519 (executing program)
2025/08/29 10:30:22 fetching corpus: 2950, signal 139106/165211 (executing program)
2025/08/29 10:30:22 fetching corpus: 3000, signal 139782/165907 (executing program)
2025/08/29 10:30:22 fetching corpus: 3050, signal 140553/166603 (executing program)
2025/08/29 10:30:23 fetching corpus: 3100, signal 141190/167231 (executing program)
2025/08/29 10:30:23 fetching corpus: 3150, signal 141763/167834 (executing program)
2025/08/29 10:30:23 fetching corpus: 3200, signal 142286/168435 (executing program)
2025/08/29 10:30:23 fetching corpus: 3250, signal 142873/169002 (executing program)
2025/08/29 10:30:23 fetching corpus: 3300, signal 143656/169572 (executing program)
2025/08/29 10:30:23 fetching corpus: 3350, signal 143995/170015 (executing program)
2025/08/29 10:30:23 fetching corpus: 3400, signal 144484/170544 (executing program)
2025/08/29 10:30:23 fetching corpus: 3450, signal 145084/171040 (executing program)
2025/08/29 10:30:23 fetching corpus: 3500, signal 145634/171549 (executing program)
2025/08/29 10:30:23 fetching corpus: 3550, signal 146234/172036 (executing program)
2025/08/29 10:30:24 fetching corpus: 3600, signal 147023/172533 (executing program)
2025/08/29 10:30:24 fetching corpus: 3650, signal 147694/173025 (executing program)
2025/08/29 10:30:24 fetching corpus: 3700, signal 148146/173419 (executing program)
2025/08/29 10:30:24 fetching corpus: 3750, signal 148691/173804 (executing program)
2025/08/29 10:30:24 fetching corpus: 3800, signal 149519/174229 (executing program)
2025/08/29 10:30:24 fetching corpus: 3850, signal 150092/174595 (executing program)
2025/08/29 10:30:24 fetching corpus: 3900, signal 150560/174942 (executing program)
2025/08/29 10:30:24 fetching corpus: 3950, signal 151084/175261 (executing program)
2025/08/29 10:30:24 fetching corpus: 4000, signal 151831/175628 (executing program)
2025/08/29 10:30:25 fetching corpus: 4050, signal 152263/175947 (executing program)
2025/08/29 10:30:25 fetching corpus: 4100, signal 152649/176301 (executing program)
2025/08/29 10:30:25 fetching corpus: 4150, signal 153310/176640 (executing program)
2025/08/29 10:30:25 fetching corpus: 4200, signal 154274/176912 (executing program)
2025/08/29 10:30:25 fetching corpus: 4250, signal 155001/177181 (executing program)
2025/08/29 10:30:25 fetching corpus: 4300, signal 155446/177223 (executing program)
2025/08/29 10:30:25 fetching corpus: 4350, signal 156040/177231 (executing program)
2025/08/29 10:30:25 fetching corpus: 4400, signal 156532/177257 (executing program)
2025/08/29 10:30:25 fetching corpus: 4450, signal 156979/177261 (executing program)
2025/08/29 10:30:25 fetching corpus: 4500, signal 157529/177262 (executing program)
2025/08/29 10:30:25 fetching corpus: 4550, signal 158179/177272 (executing program)
2025/08/29 10:30:26 fetching corpus: 4600, signal 158696/177288 (executing program)
2025/08/29 10:30:26 fetching corpus: 4650, signal 159052/177298 (executing program)
2025/08/29 10:30:26 fetching corpus: 4700, signal 159879/177338 (executing program)
2025/08/29 10:30:26 fetching corpus: 4750, signal 160361/177362 (executing program)
2025/08/29 10:30:26 fetching corpus: 4800, signal 160801/177376 (executing program)
2025/08/29 10:30:26 fetching corpus: 4850, signal 161207/177380 (executing program)
2025/08/29 10:30:26 fetching corpus: 4900, signal 161534/177380 (executing program)
2025/08/29 10:30:26 fetching corpus: 4950, signal 162279/177400 (executing program)
2025/08/29 10:30:26 fetching corpus: 5000, signal 162934/177403 (executing program)
2025/08/29 10:30:26 fetching corpus: 5050, signal 163246/177409 (executing program)
2025/08/29 10:30:26 fetching corpus: 5100, signal 163567/177417 (executing program)
2025/08/29 10:30:27 fetching corpus: 5150, signal 163839/177430 (executing program)
2025/08/29 10:30:27 fetching corpus: 5200, signal 164236/177432 (executing program)
2025/08/29 10:30:27 fetching corpus: 5250, signal 164648/177432 (executing program)
2025/08/29 10:30:27 fetching corpus: 5300, signal 165158/177441 (executing program)
2025/08/29 10:30:27 fetching corpus: 5350, signal 165453/177478 (executing program)
2025/08/29 10:30:27 fetching corpus: 5400, signal 165787/177503 (executing program)
2025/08/29 10:30:27 fetching corpus: 5450, signal 166156/177512 (executing program)
2025/08/29 10:30:27 fetching corpus: 5500, signal 166482/177527 (executing program)
2025/08/29 10:30:27 fetching corpus: 5550, signal 168030/177533 (executing program)
2025/08/29 10:30:27 fetching corpus: 5600, signal 168279/177575 (executing program)
2025/08/29 10:30:28 fetching corpus: 5650, signal 168670/177577 (executing program)
2025/08/29 10:30:28 fetching corpus: 5700, signal 169003/177577 (executing program)
2025/08/29 10:30:28 fetching corpus: 5750, signal 169544/177593 (executing program)
2025/08/29 10:30:28 fetching corpus: 5800, signal 169978/177645 (executing program)
2025/08/29 10:30:28 fetching corpus: 5850, signal 170342/177670 (executing program)
2025/08/29 10:30:28 fetching corpus: 5900, signal 170802/177679 (executing program)
2025/08/29 10:30:28 fetching corpus: 5950, signal 171069/177686 (executing program)
2025/08/29 10:30:28 fetching corpus: 6000, signal 171382/177695 (executing program)
2025/08/29 10:30:28 fetching corpus: 6050, signal 171804/177705 (executing program)
2025/08/29 10:30:28 fetching corpus: 6100, signal 172193/177804 (executing program)
2025/08/29 10:30:28 fetching corpus: 6150, signal 172551/177808 (executing program)
2025/08/29 10:30:28 fetching corpus: 6200, signal 172832/177815 (executing program)
2025/08/29 10:30:29 fetching corpus: 6250, signal 173254/177848 (executing program)
2025/08/29 10:30:29 fetching corpus: 6300, signal 173586/177863 (executing program)
2025/08/29 10:30:29 fetching corpus: 6350, signal 173974/177897 (executing program)
2025/08/29 10:30:29 fetching corpus: 6400, signal 174194/177901 (executing program)
2025/08/29 10:30:29 fetching corpus: 6450, signal 174552/177903 (executing program)
2025/08/29 10:30:29 fetching corpus: 6500, signal 174746/177918 (executing program)
2025/08/29 10:30:29 fetching corpus: 6550, signal 175002/177920 (executing program)
2025/08/29 10:30:29 fetching corpus: 6600, signal 175388/177932 (executing program)
2025/08/29 10:30:29 fetching corpus: 6609, signal 175431/177934 (executing program)
2025/08/29 10:30:29 fetching corpus: 6609, signal 175431/177934 (executing program)
2025/08/29 10:30:31 starting 8 fuzzer processes
10:30:31 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0)
r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r0, 0x0)
syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040))
madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15)
creat(&(0x7f0000000080)='./file1\x00', 0x0)

10:30:31 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)={0x1c, 0x64, 0x1, 0x0, 0x0, "", [@typed={0xa, 0x0, 0x0, 0x0, @str='wlan1\x00'}]}, 0x1c}], 0x1}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)

10:30:31 executing program 7:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4442, 0x0)
pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0)
r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r0, 0x0)
syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4)

10:30:31 executing program 2:
syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_ext_features={{0x23, 0xd}, {0x0, 0xc9, 0x0, 0x0, "de20b4f40473d61e"}}}, 0x10)

10:30:31 executing program 3:
r0 = socket$netlink(0x10, 0x3, 0x0)
fsetxattr$security_selinux(r0, &(0x7f00000000c0), &(0x7f0000000140)='system_u:object_r:initrc_var_run_t:s0\x00', 0x20, 0x0)

[   76.120587] audit: type=1400 audit(1756463431.930:7): avc:  denied  { execmem } for  pid=272 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
10:30:31 executing program 4:
renameat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00')

10:30:31 executing program 5:
prctl$PR_SET_MM(0x24, 0x3, &(0x7f0000ffa000/0x4000)=nil)

10:30:31 executing program 6:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000002700)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, &(0x7f0000002640)=""/100, 0x8001, 0x0, 0x0, 0x0})
sendmmsg$unix(r0, &(0x7f0000000c80), 0x80000, 0x0)

[   77.343392] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   77.346002] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   77.347982] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   77.350396] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   77.352237] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   77.354139] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   77.357608] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   77.360137] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   77.371535] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   77.386888] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   77.436289] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   77.443993] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   77.446009] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   77.449472] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   77.451570] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   77.453254] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   77.456684] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   77.460912] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   77.474404] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   77.486031] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   77.487785] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   77.489239] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[   77.499959] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   77.507930] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[   77.509953] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[   77.524279] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   77.527787] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[   77.531862] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[   77.535426] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[   77.539027] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[   77.540732] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[   77.543755] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[   77.561042] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   77.569195] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[   77.573379] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[   77.577366] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   77.589075] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[   77.594946] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[   77.624257] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[   77.627081] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[   79.433157] Bluetooth: hci0: command tx timeout
[   79.433924] Bluetooth: hci1: command tx timeout
[   79.496815] Bluetooth: hci2: command tx timeout
[   79.560826] Bluetooth: hci3: command tx timeout
[   79.625672] Bluetooth: hci6: command tx timeout
[   79.688792] Bluetooth: hci4: command tx timeout
[   79.752692] Bluetooth: hci7: command tx timeout
[   79.753253] Bluetooth: hci5: command tx timeout
[   81.479702] Bluetooth: hci0: command tx timeout
[   81.480171] Bluetooth: hci1: command tx timeout
[   81.543770] Bluetooth: hci2: command tx timeout
[   81.610637] Bluetooth: hci3: command tx timeout
[   81.672730] Bluetooth: hci6: command tx timeout
[   81.736749] Bluetooth: hci4: command tx timeout
[   81.799697] Bluetooth: hci5: command tx timeout
[   81.800069] Bluetooth: hci7: command tx timeout
[   83.527790] Bluetooth: hci1: command tx timeout
[   83.528239] Bluetooth: hci0: command tx timeout
[   83.592684] Bluetooth: hci2: command tx timeout
[   83.655676] Bluetooth: hci3: command tx timeout
[   83.720791] Bluetooth: hci6: command tx timeout
[   83.783734] Bluetooth: hci4: command tx timeout
[   83.848237] Bluetooth: hci7: command tx timeout
[   83.849335] Bluetooth: hci5: command tx timeout
[   85.575786] Bluetooth: hci0: command tx timeout
[   85.576556] Bluetooth: hci1: command tx timeout
[   85.639978] Bluetooth: hci2: command tx timeout
[   85.703967] Bluetooth: hci3: command tx timeout
[   85.768152] Bluetooth: hci6: command tx timeout
[   85.831691] Bluetooth: hci4: command tx timeout
[   85.895830] Bluetooth: hci5: command tx timeout
[   85.896528] Bluetooth: hci7: command tx timeout
[  114.731430] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  114.732385] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  114.889239] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  114.890140] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  115.133687] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  115.134280] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  115.310882] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  115.311494] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  115.312952] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  115.313554] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  115.439487] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  115.440130] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  115.528683] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  115.529311] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  115.628167] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  115.628832] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  115.738439] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  115.739376] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  115.757168] SELinux:  Context system_u:object_r:initrc_var_run is not valid (left unmapped).
[  115.759552] audit: type=1400 audit(1756463471.568:8): avc:  denied  { relabelto } for  pid=3860 comm="syz-executor.3" name="NETLINK" dev="sockfs" ino=5350 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=netlink_route_socket permissive=1 trawcon="system_u:object_r:initrc_var_run"
[  115.821981] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  115.822565] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  115.860659] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  115.861224] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  115.945516] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  115.946248] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  116.069720] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  116.070355] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  116.101275] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  116.102052] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  116.277989] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  116.278633] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  116.298780] audit: type=1400 audit(1756463472.108:9): avc:  denied  { open } for  pid=3888 comm="syz-executor.6" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
[  116.301790] audit: type=1400 audit(1756463472.109:10): avc:  denied  { kernel } for  pid=3889 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
[  116.324092] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  116.348101] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  116.349211] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
10:31:12 executing program 3:
r0 = socket$netlink(0x10, 0x3, 0x0)
fsetxattr$security_selinux(r0, &(0x7f00000000c0), &(0x7f0000000140)='system_u:object_r:initrc_var_run_t:s0\x00', 0x20, 0x0)

10:31:12 executing program 2:
syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_ext_features={{0x23, 0xd}, {0x0, 0xc9, 0x0, 0x0, "de20b4f40473d61e"}}}, 0x10)

10:31:12 executing program 4:
renameat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00')

10:31:12 executing program 7:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r1 = dup(r0)
getsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0xe, &(0x7f0000000000), &(0x7f0000000040)=0x4)

10:31:12 executing program 5:
prctl$PR_SET_MM(0x24, 0x3, &(0x7f0000ffa000/0x4000)=nil)

10:31:12 executing program 1:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)={0x1c, 0x64, 0x1, 0x0, 0x0, "", [@typed={0xa, 0x0, 0x0, 0x0, @str='wlan1\x00'}]}, 0x1c}], 0x1}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)

10:31:12 executing program 6:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000002700)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, &(0x7f0000002640)=""/100, 0x8001, 0x0, 0x0, 0x0})
sendmmsg$unix(r0, &(0x7f0000000c80), 0x80000, 0x0)

10:31:12 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0)
r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r0, 0x0)
syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040))
madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15)
creat(&(0x7f0000000080)='./file1\x00', 0x0)

10:31:12 executing program 5:
prctl$PR_SET_MM(0x24, 0x3, &(0x7f0000ffa000/0x4000)=nil)

10:31:12 executing program 3:
r0 = socket$netlink(0x10, 0x3, 0x0)
fsetxattr$security_selinux(r0, &(0x7f00000000c0), &(0x7f0000000140)='system_u:object_r:initrc_var_run_t:s0\x00', 0x20, 0x0)

10:31:12 executing program 2:
syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_ext_features={{0x23, 0xd}, {0x0, 0xc9, 0x0, 0x0, "de20b4f40473d61e"}}}, 0x10)

10:31:12 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0)
r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r0, 0x0)
syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040))
madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15)
creat(&(0x7f0000000080)='./file1\x00', 0x0)

10:31:12 executing program 4:
renameat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00')

[  116.662100] Oops: general protection fault, probably for non-canonical address 0xdffffc0020000032: 0000 [#1] SMP KASAN NOPTI
[  116.663024] KASAN: probably user-memory-access in range [0x0000000100000190-0x0000000100000197]
[  116.663710] CPU: 0 UID: 0 PID: 3914 Comm: syz-executor.5 Tainted: G        W           6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) 
[  116.665486] Tainted: [W]=WARN
[  116.666273] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  116.668011] RIP: 0010:perf_tp_event+0x175/0xe70
[  116.669464] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
[  116.672998] RSP: 0018:ffff88801731f800 EFLAGS: 00010212
[  116.673424] RAX: 0000000020000032 RBX: 00000000ffffffa0 RCX: 0000000000000002
[  116.673981] RDX: ffff8880167cd280 RSI: ffffffff818995b7 RDI: 0000000100000190
[  116.674542] RBP: ffff88801731fa70 R08: ffff88806ce31340 R09: ffffe8ffffc16248
[  116.675095] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000
[  116.675652] R13: 000000000000002c R14: ffff88806ce31340 R15: dffffc0000000000
[  116.676210] FS:  000055555d4ab400(0000) GS:ffff8880e55dd000(0000) knlGS:0000000000000000
[  116.676844] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  116.677304] CR2: 00007f01b6902718 CR3: 0000000043e87000 CR4: 0000000000350ef0
[  116.677864] Call Trace:
[  116.678072]  <TASK>
[  116.678260]  ? arch_scale_cpu_capacity+0x17/0xa0
[  116.678648]  ? __pfx_perf_tp_event+0x10/0x10
[  116.679003]  ? __asan_memset+0x24/0x50
[  116.679333]  ? perf_trace_lock+0xb5/0x5d0
[  116.679668]  ? kvm_sched_clock_read+0x16/0x30
[  116.680034]  ? sched_clock+0x37/0x60
[  116.680342]  ? sched_clock_cpu+0x6c/0x4e0
[  116.680689]  ? lock_is_held_type+0x9e/0x120
[  116.681040]  ? perf_trace_run_bpf_submit+0xef/0x180
[  116.681445]  perf_trace_run_bpf_submit+0xef/0x180
[  116.681837]  perf_trace_lock+0x337/0x5d0
[  116.682165]  ? __pfx_perf_trace_lock+0x10/0x10
[  116.682534]  ? lock_acquire+0x15e/0x2f0
[  116.682854]  ? futex_ref_get+0x48/0x300
[  116.683173]  ? futex_ref_get+0x114/0x300
[  116.683494]  ? futex_hash+0x15c/0x390
[  116.683800]  lock_release+0x1ab/0x290
[  116.684109]  ? futex_hash+0x15c/0x390
[  116.684421]  futex_ref_get+0x119/0x300
[  116.684740]  ? futex_hash+0x15c/0x390
[  116.685044]  futex_hash+0x70/0x390
[  116.685333]  futex_wake+0x143/0x540
[  116.685631]  ? put_pid+0x1f/0x30
[  116.685905]  ? kernel_clone+0x204/0x7f0
[  116.686227]  ? __pfx_futex_wake+0x10/0x10
[  116.686562]  ? __pfx_kernel_clone+0x10/0x10
[  116.686907]  ? perf_trace_lock+0xb5/0x5d0
[  116.687243]  do_futex+0x26d/0x370
[  116.687534]  ? __pfx_do_futex+0x10/0x10
[  116.687858]  ? __pfx___do_sys_clone+0x10/0x10
[  116.688217]  ? find_held_lock+0x2b/0x80
[  116.688542]  __x64_sys_futex+0x1c9/0x4d0
[  116.688882]  ? __pfx___x64_sys_futex+0x10/0x10
[  116.689252]  ? xfd_validate_state+0x55/0x180
[  116.689616]  do_syscall_64+0xbf/0x360
[  116.689925]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  116.690332] RIP: 0033:0x7fe21ec19b19
[  116.690628] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  116.692051] RSP: 002b:00007ffdc5ef48a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  116.692646] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fe21ec19b19
[  116.693213] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fe21ed2cf68
[  116.693771] RBP: 00007fe21ed2cf60 R08: 00007fe21c18f700 R09: 0000000000000000
[  116.694331] R10: 00007fe21c18f700 R11: 0000000000000246 R12: 00007fe21ed31060
[  116.694890] R13: 00007ffdc5ef49b0 R14: 00007fe21ed2cf60 R15: 000000000001c73d
[  116.695455]  </TASK>
[  116.695646] Modules linked in:
[  116.695910] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000032: 0000 [#2] SMP KASAN NOPTI
[  116.696830] KASAN: null-ptr-deref in range [0x0000000000000190-0x0000000000000197]
[  116.697424] CPU: 1 UID: 0 PID: 3916 Comm: syz-executor.3 Tainted: G      D W           6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) 
[  116.698350] Tainted: [D]=DIE, [W]=WARN
[  116.698652] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  116.699293] RIP: 0010:perf_tp_event+0x175/0xe70
[  116.699675] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
[  116.701101] RSP: 0018:ffff8880453e7800 EFLAGS: 00010212
[  116.701521] RAX: 0000000000000032 RBX: ffffffffffffffa1 RCX: 0000000000000002
[  116.702083] RDX: ffff888015e79b80 RSI: ffffffff818995b7 RDI: 0000000000000191
[  116.702641] RBP: ffff8880453e7a70 R08: ffff88806cf31340 R09: ffffe8ffffd16248
[  116.703199] R10: 0000000000000000 R11: 0000000000000000 R12: dffffc0000000000
[  116.703757] R13: 000000000000002c R14: ffff88806cf31340 R15: dffffc0000000000
[  116.704320] FS:  000055555f2c6400(0000) GS:ffff8880e56dd000(0000) knlGS:0000000000000000
[  116.704956] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  116.705418] CR2: 000055555f2c7c18 CR3: 000000004357f000 CR4: 0000000000350ef0
[  116.705983] Call Trace:
[  116.706194]  <TASK>
[  116.706385]  ? arch_scale_cpu_capacity+0x17/0xa0
[  116.706779]  ? __pfx_perf_tp_event+0x10/0x10
[  116.707135]  ? __asan_memset+0x24/0x50
[  116.707470]  ? __pfx_perf_trace_lock+0x10/0x10
[  116.707840]  ? __pfx___mutex_lock+0x10/0x10
[  116.708195]  ? perf_trace_lock+0xb5/0x5d0
[  116.708535]  ? kvm_sched_clock_read+0x16/0x30
[  116.708910]  ? sched_clock+0x37/0x60
[  116.709220]  ? sched_clock_cpu+0x6c/0x4e0
[  116.709559]  ? perf_trace_run_bpf_submit+0xef/0x180
[  116.709966]  perf_trace_run_bpf_submit+0xef/0x180
[  116.710360]  perf_trace_lock+0x337/0x5d0
[  116.710690]  ? __pfx_perf_trace_lock+0x10/0x10
[  116.711066]  ? __pfx_perf_trace_lock+0x10/0x10
[  116.711439]  ? get_futex_key+0x592/0x14a0
[  116.711773]  ? futex_ref_get+0x114/0x300
[  116.712099]  ? futex_hash+0x15c/0x390
[  116.712409]  lock_release+0x1ab/0x290
[  116.712731]  ? futex_hash+0x15c/0x390
[  116.713037]  futex_ref_get+0x119/0x300
[  116.713352]  ? futex_hash+0x15c/0x390
[  116.713655]  futex_hash+0x70/0x390
[  116.713943]  futex_wake+0x143/0x540
[  116.714241]  ? put_pid+0x1f/0x30
[  116.714519]  ? kernel_clone+0x204/0x7f0
[  116.714839]  ? __pfx_futex_wake+0x10/0x10
[  116.715171]  ? __pfx_kernel_clone+0x10/0x10
[  116.715516]  ? perf_trace_lock+0xb5/0x5d0
[  116.715847]  ? __pfx___handle_mm_fault+0x10/0x10
[  116.716234]  do_futex+0x26d/0x370
[  116.716518]  ? __pfx_do_futex+0x10/0x10
[  116.716846]  ? __pfx___do_sys_clone+0x10/0x10
[  116.717204]  ? handle_mm_fault+0x590/0x9b0
[  116.717547]  __x64_sys_futex+0x1c9/0x4d0
[  116.717875]  ? __pfx___x64_sys_futex+0x10/0x10
[  116.718245]  ? trace_irq_enable.constprop.0+0xc2/0x100
[  116.718663]  do_syscall_64+0xbf/0x360
[  116.718971]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  116.719381] RIP: 0033:0x7fd15de4cb19
[  116.719677] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  116.721094] RSP: 002b:00007ffd7d02cce8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  116.721689] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fd15de4cb19
[  116.722259] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fd15df5ff68
[  116.722847] RBP: 00007fd15df5ff60 R08: 00007fd15b3c2700 R09: 0000000000000000
[  116.723427] R10: 00007fd15b3c2700 R11: 0000000000000246 R12: 00007fd15df64060
[  116.724012] R13: 00007ffd7d02cdf0 R14: 00007fd15df5ff60 R15: 000000000001c744
[  116.724616]  </TASK>
[  116.724823] Modules linked in:
[  116.725107] Oops: general protection fault, probably for non-canonical address 0xdffffc0020000032: 0000 [#3] SMP KASAN NOPTI
[  116.726038] KASAN: probably user-memory-access in range [0x0000000100000190-0x0000000100000197]
[  116.726754] CPU: 0 UID: 0 PID: 3914 Comm: syz-executor.5 Tainted: G      D W           6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) 
[  116.727736] Tainted: [D]=DIE, [W]=WARN
[  116.728060] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  116.728741] RIP: 0010:perf_tp_event+0x175/0xe70
[  116.729134] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
[  116.730639] RSP: 0018:ffff88806ce08a80 EFLAGS: 00010012
[  116.731079] RAX: 0000000020000032 RBX: 00000000ffffffa0 RCX: 0000000000000002
[  116.731678] RDX: ffff8880167cd280 RSI: ffffffff818995b7 RDI: 0000000100000190
[  116.732280] RBP: ffff88806ce08cf0 R08: ffff88806ce31490 R09: ffffe8ffffc16248
[  116.732903] R10: 0000000000000000 R11: ffff88806ce37018 R12: dffffc0000000000
[  116.733486] R13: 0000000000000024 R14: ffff88806ce31490 R15: dffffc0000000000
[  116.734068] FS:  000055555d4ab400(0000) GS:ffff8880e55dd000(0000) knlGS:0000000000000000
[  116.734731] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  116.735214] CR2: 00007f01b6902718 CR3: 0000000043e87000 CR4: 0000000000350ef0
[  116.735819] Call Trace:
[  116.736041]  <IRQ>
[  116.736234]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  116.736708]  ? arch_stack_walk+0x9c/0xf0
[  116.737057]  ? __pfx_perf_tp_event+0x10/0x10
[  116.737430]  ? sched_clock_cpu+0x6c/0x4e0
[  116.737788]  ? trace_pelt_se_tp+0xdf/0x130
[  116.738153]  ? __update_load_avg_se+0x428/0xa40
[  116.738555]  ? lock_is_held_type+0x9e/0x120
[  116.738926]  ? perf_trace_lock+0xb5/0x5d0
[  116.739265]  ? perf_trace_lock+0xb5/0x5d0
[  116.739609]  ? __resched_curr+0x2a2/0x330
[  116.739958]  ? __pfx_perf_trace_lock+0x10/0x10
[  116.740341]  ? __pfx_perf_trace_lock+0x10/0x10
[  116.740736]  ? lock_is_held_type+0x9e/0x120
[  116.741101]  ? perf_trace_run_bpf_submit+0xef/0x180
[  116.741526]  perf_trace_run_bpf_submit+0xef/0x180
[  116.741948]  perf_trace_lock+0x337/0x5d0
[  116.742281]  ? place_entity+0x1c/0x410
[  116.742605]  ? kvm_sched_clock_read+0x16/0x30
[  116.742980]  ? __pfx_perf_trace_lock+0x10/0x10
[  116.743379]  ? check_preempt_wakeup_fair+0x6e/0x950
[  116.743799]  ? sched_ttwu_pending+0x2e0/0x4a0
[  116.744186]  lock_release+0x1ab/0x290
[  116.744504]  ? ttwu_do_activate+0x1a4/0x8a0
[  116.744870]  _raw_spin_unlock+0x16/0x40
[  116.745209]  sched_ttwu_pending+0x2e0/0x4a0
[  116.745569]  ? __pfx_sched_ttwu_pending+0x10/0x10
[  116.745965]  ? hrtimer_interrupt+0x652/0x830
[  116.746333]  __flush_smp_call_function_queue+0x434/0x740
[  116.746781]  __sysvec_call_function_single+0x6d/0x370
[  116.747208]  sysvec_call_function_single+0xa1/0xc0
[  116.747626]  </IRQ>
[  116.747822]  <TASK>
[  116.748012]  asm_sysvec_call_function_single+0x1a/0x20
[  116.748451] RIP: 0010:oops_exit+0x0/0x50
[  116.748795] Code: f1 39 00 be ff ff ff ff 48 c7 c7 50 ac 43 86 e8 c6 0f f9 ff 5b e9 20 f1 39 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <66> 0f 1f 00 53 e8 06 f1 39 00 8b 1d c0 ed 4e 06 31 ff 89 de e8 27
[  116.750282] RSP: 0018:ffff88801731f690 EFLAGS: 00000202
[  116.750711] RAX: 0000000000000000 RBX: 0000000000000293 RCX: ffffffff8139f06f
[  116.751273] RDX: ffff8880167cd280 RSI: ffffffff812a3dca RDI: 0000000000000007
[  116.751851] RBP: 000000000000000b R08: 0000000000000001 R09: fffffbfff0f11c90
[  116.752442] R10: 0000000000000000 R11: 0000000000000001 R12: ffff88801731f758
[  116.753030] R13: 0000000000000000 R14: dffffc0020000032 R15: 0000000000000000
[  116.753606]  ? add_taint+0x5f/0xd0
[  116.753906]  ? oops_end+0x4a/0xe0
[  116.754205]  oops_end+0x65/0xe0
[  116.754485]  exc_general_protection+0x1a2/0x330
[  116.754881]  asm_exc_general_protection+0x26/0x30
[  116.755306] RIP: 0010:perf_tp_event+0x175/0xe70
[  116.755710] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
[  116.757219] RSP: 0018:ffff88801731f800 EFLAGS: 00010212
[  116.757674] RAX: 0000000020000032 RBX: 00000000ffffffa0 RCX: 0000000000000002
[  116.758267] RDX: ffff8880167cd280 RSI: ffffffff818995b7 RDI: 0000000100000190
[  116.758856] RBP: ffff88801731fa70 R08: ffff88806ce31340 R09: ffffe8ffffc16248
[  116.759465] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000
[  116.760052] R13: 000000000000002c R14: ffff88806ce31340 R15: dffffc0000000000
[  116.760669]  ? perf_tp_event+0x167/0xe70
[  116.761036]  ? arch_scale_cpu_capacity+0x17/0xa0
[  116.761447]  ? __pfx_perf_tp_event+0x10/0x10
[  116.761824]  ? __asan_memset+0x24/0x50
[  116.762162]  ? perf_trace_lock+0xb5/0x5d0
[  116.762503]  ? kvm_sched_clock_read+0x16/0x30
[  116.762875]  ? sched_clock+0x37/0x60
[  116.763204]  ? sched_clock_cpu+0x6c/0x4e0
[  116.763574]  ? lock_is_held_type+0x9e/0x120
[  116.763940]  ? perf_trace_run_bpf_submit+0xef/0x180
[  116.764355]  perf_trace_run_bpf_submit+0xef/0x180
[  116.764765]  perf_trace_lock+0x337/0x5d0
[  116.765119]  ? __pfx_perf_trace_lock+0x10/0x10
[  116.765501]  ? lock_acquire+0x15e/0x2f0
[  116.765820]  ? futex_ref_get+0x48/0x300
[  116.766137]  ? futex_ref_get+0x114/0x300
[  116.766456]  ? futex_hash+0x15c/0x390
[  116.766760]  lock_release+0x1ab/0x290
[  116.767066]  ? futex_hash+0x15c/0x390
[  116.767369]  futex_ref_get+0x119/0x300
[  116.767680]  ? futex_hash+0x15c/0x390
[  116.767981]  futex_hash+0x70/0x390
[  116.768270]  futex_wake+0x143/0x540
[  116.768564]  ? put_pid+0x1f/0x30
[  116.768844]  ? kernel_clone+0x204/0x7f0
[  116.769160]  ? __pfx_futex_wake+0x10/0x10
[  116.769492]  ? __pfx_kernel_clone+0x10/0x10
[  116.769835]  ? perf_trace_lock+0xb5/0x5d0
[  116.770168]  do_futex+0x26d/0x370
[  116.770451]  ? __pfx_do_futex+0x10/0x10
[  116.770770]  ? __pfx___do_sys_clone+0x10/0x10
[  116.771126]  ? find_held_lock+0x2b/0x80
[  116.771451]  __x64_sys_futex+0x1c9/0x4d0
[  116.771777]  ? __pfx___x64_sys_futex+0x10/0x10
[  116.772141]  ? xfd_validate_state+0x55/0x180
[  116.772501]  do_syscall_64+0xbf/0x360
[  116.772812]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  116.773219] RIP: 0033:0x7fe21ec19b19
[  116.773514] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  116.774926] RSP: 002b:00007ffdc5ef48a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  116.775517] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fe21ec19b19
[  116.776080] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fe21ed2cf68
[  116.776639] RBP: 00007fe21ed2cf60 R08: 00007fe21c18f700 R09: 0000000000000000
[  116.777202] R10: 00007fe21c18f700 R11: 0000000000000246 R12: 00007fe21ed31060
[  116.777762] R13: 00007ffdc5ef49b0 R14: 00007fe21ed2cf60 R15: 000000000001c73d
[  116.778328]  </TASK>
[  116.778518] Modules linked in:
[  116.778778] ---[ end trace 0000000000000000 ]---
[  116.778778] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000032: 0000 [#4] SMP KASAN NOPTI
[  116.779148] RIP: 0010:perf_tp_event+0x175/0xe70
[  116.780000] KASAN: null-ptr-deref in range [0x0000000000000190-0x0000000000000197]
[  116.780358] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
[  116.780951] CPU: 1 UID: 0 PID: 3916 Comm: syz-executor.3 Tainted: G      D W           6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) 
[  116.782354] RSP: 0018:ffff88801731f800 EFLAGS: 00010212
[  116.783269] Tainted: [D]=DIE, [W]=WARN
[  116.783678] RAX: 0000000020000032 RBX: 00000000ffffffa0 RCX: 0000000000000002
[  116.783980] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  116.784528] RDX: ffff8880167cd280 RSI: ffffffff818995b7 RDI: 0000000100000190
[  116.785171] RIP: 0010:perf_tp_event+0x175/0xe70
[  116.785726] RBP: ffff88801731fa70 R08: ffff88806ce31340 R09: ffffe8ffffc16248
[  116.786085] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01
[  116.786635] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000
[  116.788039] RSP: 0018:ffff88806cf08a80 EFLAGS: 00010012
[  116.788591] R13: 000000000000002c R14: ffff88806ce31340 R15: dffffc0000000000
[  116.788602] FS:  000055555d4ab400(0000) GS:ffff8880e55dd000(0000) knlGS:0000000000000000
[  116.789009] RAX: 0000000000000032 RBX: ffffffffffffffa1 RCX: 0000000000000002
[  116.789564] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  116.790183] RDX: ffff888015e79b80 RSI: ffffffff818995b7 RDI: 0000000000000191
[  116.790737] CR2: 00007f01b6902718 CR3: 0000000043e87000 CR4: 0000000000350ef0
[  116.791185] RBP: ffff88806cf08cf0 R08: ffff88806cf31490 R09: ffffe8ffffd16248
[  116.791744] Kernel panic - not syncing: Fatal exception in interrupt
[  117.885913] Shutting down cpus with NMI
[  117.888659] Kernel Offset: disabled
[  117.889199] ---[ end Kernel panic - not syncing: Fatal exception in interrupt ]---

VM DIAGNOSIS:
10:31:12  Registers:
info registers vcpu 0
RAX=000000000000006e RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff828e32c5 RDI=ffffffff88724180 RBP=ffffffff88724140 RSP=ffff88801731f158
R8 =0000000000000000 R9 =ffffed10016d2046 R10=000000000000006e R11=30376578302f4952
R12=000000000000006e R13=0000000000000010 R14=ffffffff88724140 R15=ffffffff828e32b0
RIP=ffffffff828e331d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 000055555d4ab400 00000000 00000000
GS =0000 ffff8880e55dd000 00000000 00000000
LDT=0000 fffffe4500000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f01b6902718 CR3=0000000043e87000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=00007fe21ed007c000007fe21ed007c8
XMM02=00007fe21ed007e000007fe21ed007c0 XMM03=00007fe21ed007c800007fe21ed007c0
XMM04=ffffffff0000ff00000000ff00000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=0000000000000001 RBX=0000000000000001 RCX=ffffffff84bdec0e RDX=fffffbfff0f0ec09
RSI=0000000000000004 RDI=ffffffff87876044 RBP=ffffffff87876044 RSP=ffff8880453e75b0
R8 =0000000000000000 R9 =fffffbfff0f0ec08 R10=ffffffff87876047 R11=202c746c75616620
R12=1ffff11008a7ceb7 R13=0000000000000007 R14=fffffbfff0f0ec08 R15=ffff8880453e75e8
RIP=ffffffff84bdeda0 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 000055555f2c6400 00000000 00000000
GS =0000 ffff8880e56dd000 00000000 00000000
LDT=0000 fffffe2300000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055555f2c7c18 CR3=000000004357f000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=00007fd15df337c000007fd15df337c8
XMM02=00007fd15df337e000007fd15df337c0 XMM03=00007fd15df337c800007fd15df337c0
XMM04=ffffffff0000ff00000000ff00000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000